ManageIQ/manageiq

View on GitHub
db/fixtures/miq_user_roles.yml

Summary

Maintainability
Test Coverage
---

- :name: EvmRole-super_administrator
  :read_only: true
  :miq_product_feature_identifiers:
  - everything

- :name: EvmRole-administrator
  :read_only: true
  :miq_product_feature_identifiers:
  - about
  - add_global_filter
  - all_vm_rules
  - ems_automation
  - automation_manager_configured_system
  - configuration_script
  - embedded_automation_manager
  - availability_zone
  - host_aggregate
  - flavor
  - floating_ip
  - chargeback
  - catalog
  - cloud_network
  - cloud_object_store_container
  - cloud_object_store_object
  - control
  - dashboard
  - storage
  - storage_pod
  - ems_cloud
  - ems_network
  - ems_cluster
  - ems_infra
  - ems_infra_admin_ui
  - ems_physical_infra
  - event_streams
  - container_dashboard
  - ems_container
  - configuration_job
  - ems_configuration
  - configuration_profile
  - configured_system
  - container_project
  - container_route
  - container_service
  - container_replicator
  - container_group
  - container
  - container_node
  - persistent_volume
  - container_build
  - container_image_registry
  - container_image
  - container_topology
  - cloud_topology
  - infra_topology
  - host
  - infra_networking
  - miq_ae_class_explorer
  - miq_ae_customization_explorer
  - miq_ae_class_import_export
  - miq_ae_class_log
  - miq_ae_class_simulation
  - miq_task_all_ui
  - miq_task_my_ui
  - my_settings
  - policy_simulation
  - policy_log
  - miq_report
  - miq_report_superadmin
  - miq_request
  - miq_request_approval
  - miq_template
  - orchestration_stack
  - physical_rack
  - physical_chassis
  - physical_switch
  - physical_server
  - physical_storage
  - physical_infra_topology
  - policy_import_export
  - pxe
  - resource_pool
  - rss
  - security_group
  - service
  - timeline
  - utilization
  - vm_explorer
  - vm
  - vm_cloud_explorer
  - vm_infra_explorer
  - sui_services
  - sui_notifications
  - revoke_user_sessions

- :name: EvmRole-physical_storages_administrator
  :read_only: true
  :miq_product_feature_identifiers:
  - about
  - all_vm_rules
  - cloud_volume_show
  - cloud_volume_show_list
  - cloud_volume_backup_show
  - cloud_volume_backup_show_list
  - cloud_volume_snapshot_show
  - cloud_volume_snapshot_show_list
  - cloud_volume_type
  - chargeback
  - chargeback_reports
  - dashboard
  - ems_cluster_show
  - ems_cluster_show_list
  - ems_cluster_perf
  - ems_cluster_tag
  - ems_cluster_timeline
  - ems_infra
  - ems_physical_infra_console
  - ems_physical_infra_show
  - ems_physical_infra_show_list
  - ems_physical_infra_tag
  - ems_physical_infra_timeline
  - ems_storage
  - ems_block_storage
  - event_streams_view
  - host_show
  - host_show_list
  - host_perf
  - host_tag
  - host_timeline
  - host_initiator
  - host_initiator_group
  - miq_task_my_ui
  - my_settings_view
  - my_settings_time_profiles
  - my_settings_visuals
  - miq_report_run
  - miq_report_saved_reports
  - miq_report_schedules
  - miq_report_view
  - miq_request_admin
  - miq_request_view
  - miq_template_check_compliance
  - miq_template_compare
  - miq_template_drift
  - miq_template_perf
  - miq_template_show
  - miq_template_show_list
  - miq_template_snapshot
  - miq_template_tag
  - miq_template_timeline
  - physical_infra_topology_view
  - physical_rack_view
  - physical_chassis_view
  - physical_switch_view
  - physical_server_view
  - physical_storage
  - rbac_role_view
  - rbac_user_view
  - rbac_user_operate
  - rbac_group_view
  - rbac_group_operate
  - rbac_tenant_view
  - resource_pool_show
  - resource_pool_show_list
  - resource_pool_tag
  - rss
  - service_view
  - storage_show
  - storage_show_list
  - storage_perf
  - storage_resource
  - storage_service
  - storage_tag
  - tasks_view
  - timeline
  - vm_check_compliance
  - vm_cloud_explorer
  - vm_explorer
  - vm_infra_explorer
  - vm_html5_console
  - vm_vmrc_console
  - volume_mapping_refresh
  - volume_mapping_show
  - volume_mapping_show_list
  - volume_mapping_tag
  - vm_compare
  - vm_drift
  - vm_perf
  - vm_show
  - vm_show_list
  - vm_snapshot
  - vm_tag
  - vm_timeline
  - vm_chargeback
  - sui_services_view
  - sui_vm_details_view
  - sui_vm_html5_console
  - sui_vm_vmrc_console
  - sui_vm_tags
  - sui_orders_view
  - sui_orders_operations
  - sui_notifications

- :name: EvmRole-approver
  :read_only: true
  :miq_product_feature_identifiers:
  - about
  - all_vm_rules
  - chargeback
  - chargeback_reports
  - customization_template_view
  - iso_datastore_view
  - control
  - dashboard
  - ems_cluster_show
  - ems_cluster_show_list
  - ems_cluster_perf
  - ems_cluster_tag
  - ems_cluster_timeline
  - ems_infra_show
  - ems_infra_show_list
  - ems_infra_tag
  - ems_infra_timeline
  - ems_physical_infra_console
  - ems_physical_infra_tag
  - ems_physical_infra_view
  - ems_physical_infra_tag
  - host_show
  - host_show_list
  - host_perf
  - host_tag
  - host_timeline
  - my_settings_view
  - my_settings_time_profiles
  - my_settings_visuals
  - miq_report_run
  - miq_report_saved_reports
  - miq_report_schedules
  - miq_report_view
  - miq_request_control
  - miq_request_view
  - miq_task_my_ui
  - miq_template_check_compliance
  - miq_template_perf
  - miq_template_policy_sim
  - miq_template_show
  - miq_template_show_list
  - miq_template_snapshot
  - miq_template_tag
  - miq_template_timeline
  - physical_infra_topology_view
  - physical_rack_view
  - physical_chassis_view
  - physical_switch_view
  - physical_server_view
  - physical_storage_view
  - policy_log
  - policy_simulation
  - pxe_image_type_view
  - pxe_server_view
  - resource_pool_show
  - resource_pool_show_list
  - resource_pool_tag
  - rss
  - service_view
  - storage_show
  - storage_show_list
  - storage_pod_show
  - storage_pod_show_list
  - storage_perf
  - storage_tag
  - timeline
  - vm_check_compliance
  - vm_cloud_explorer
  - vm_explorer
  - vm_infra_explorer
  - vm_html5_console
  - vm_vmrc_console
  - vm_native_console
  - vm_perf
  - vm_policy_sim
  - vm_show
  - vm_show_list
  - vm_snapshot
  - vm_tag
  - vm_timeline
  - vm_chargeback
  - sui_services_view
  - sui_vm_details_view
  - sui_vm_html5_console
  - sui_vm_vmrc_console
  - sui_vm_tags
  - sui_orders_view
  - sui_notifications

- :name: EvmRole-auditor
  :read_only: true
  :miq_product_feature_identifiers:
  - about
  - ems_automation
  - embedded_automation_manager
  - chargeback
  - chargeback_reports
  - customization_template_view
  - iso_datastore_view
  - control
  - dashboard
  - ems_cluster_view
  - ems_cluster_tag
  - ems_infra_view
  - ems_infra_tag
  - ems_infra_check_compliance
  - ems_physical_infra_console
  - ems_physical_infra_tag
  - ems_physical_infra_view
  - event_streams_view
  - host_show
  - host_show_list
  - host_perf
  - infra_networking_view
  - infra_networking_tag
  - instance_view
  - instance_check_compliance
  - instance_policy_sim
  - instance_tag
  - image_view
  - image_check_compliance
  - image_policy_sim
  - image_tag
  - iso_datastore_view
  - host_view
  - host_check_compliance
  - host_tag
  - miq_task_my_ui
  - my_settings_view
  - my_settings_time_profiles
  - my_settings_visuals
  - miq_report_run
  - miq_report_saved_reports
  - miq_report_schedules
  - miq_report_view
  - miq_template_view
  - miq_template_check_compliance
  - miq_template_policy_sim
  - miq_template_snapshot_view
  - miq_template_tag
  - physical_infra_topology_view
  - physical_rack_view
  - physical_chassis_view
  - physical_switch_view
  - physical_server_view
  - physical_storage_view
  - policy_log
  - policy_profile
  - policy_simulation
  - pxe_image_type_view
  - pxe_server_view
  - resource_pool_show
  - resource_pool_show_list
  - resource_pool_tag
  - rss
  - service_view
  - storage_show
  - storage_show_list
  - storage_perf
  - storage_tag
  - storage_pod_show
  - storage_pod_show_list
  - timeline
  - utilization
  - vm_view
  - vm_check_compliance
  - vm_compare
  - vm_drift
  - vm_cloud_explorer
  - vm_explorer
  - vm_infra_explorer
  - vm_html5_console
  - vm_vmrc_console
  - vm_perf
  - vm_show
  - vm_show_list
  - vm_snapshot_view
  - vm_tag
  - vm_timeline
  - vm_chargeback
  - sui_services_view
  - sui_vm_details_view
  - sui_vm_html5_console
  - sui_vm_vmrc_console
  - sui_vm_tags
  - sui_notifications

- :name: EvmRole-desktop
  :read_only: true
  :miq_product_feature_identifiers:
  - about
  - all_vm_rules
  - ems_automation
  - automation_manager_configured_system
  - configuration_script
  - ems_configuration
  - configuration_profile
  - configured_system
  - dashboard
  - ems_physical_infra
  - event_streams
  - miq_request_admin
  - miq_request_view
  - miq_template_clone
  - miq_template_compare
  - miq_template_drift
  - miq_template_edit
  - miq_template_refresh
  - miq_template_miq_request_new
  - miq_template_perf
  - miq_template_show
  - miq_template_show_list
  - miq_template_timeline
  - my_settings_view
  - my_settings_time_profiles
  - my_settings_visuals
  - physical_rack
  - physical_chassis
  - physical_switch
  - physical_server
  - physical_infra_topology
  - physical_rack_view
  - physical_chassis_view
  - physical_switch_view
  - physical_server_view
  - physical_storage_view
  - vm_clone
  - vm_compare
  - vm_cloud_explorer
  - vm_explorer
  - vm_infra_explorer
  - vm_html5_console
  - vm_vmrc_console
  - vm_drift
  - vm_edit
  - vm_refresh
  - vm_reset
  - vm_guest_restart
  - vm_miq_request_new
  - vm_perf
  - vm_publish
  - vm_show
  - vm_show_list
  - vm_guest_shutdown
  - vm_start
  - vm_stop
  - vm_suspend
  - vm_pause
  - vm_timeline
  - vm_chargeback
  - sui_services_view
  - sui_vm_details_view
  - sui_vm_html5_console
  - sui_vm_vmrc_console
  - sui_vm_start
  - sui_vm_stop
  - sui_vm_suspend
  - sui_orders_view
  - sui_orders_operations
  - sui_notifications

- :name: EvmRole-operator
  :read_only: true
  :miq_product_feature_identifiers:
  - about
  - all_vm_rules
  - ems_automation
  - automation_manager_configured_system
  - configuration_script
  - embedded_automation_manager
  - chargeback
  - chargeback_reports
  - ems_configuration
  - configuration_profile
  - configured_system
  - dashboard
  - ems_cluster_compare
  - ems_cluster_drift
  - ems_cluster_show
  - ems_cluster_show_list
  - ems_cluster_perf
  - ems_cluster_tag
  - ems_cluster_timeline
  - ems_infra_new
  - ems_infra_delete
  - ems_infra_discover
  - ems_infra_edit
  - ems_infra_pause
  - ems_infra_refresh
  - ems_infra_resume
  - ems_infra_scale
  - ems_infra_show
  - ems_infra_show_list
  - ems_infra_tag
  - ems_infra_timeline
  - ems_physical_infra_new
  - ems_physical_infra_console
  - ems_physical_infra_delete
  - ems_physical_infra_discover
  - ems_physical_infra_edit
  - ems_physical_infra_refresh
  - ems_physical_infra_tag
  - ems_physical_infra_view
  - event_streams_view
  - physical_rack_control
  - physical_rack_view
  - physical_chassis_view
  - physical_switch_view
  - physical_server_view
  - physical_storage_view
  - physical_infra_topology_view
  - host_compare
  - host_drift
  - host_edit
  - host_refresh
  - host_show
  - host_show_list
  - host_perf
  - host_tag
  - host_timeline
  - my_settings_view
  - my_settings_time_profiles
  - my_settings_visuals
  - miq_report_run
  - miq_report_saved_reports
  - miq_report_schedules
  - miq_report_view
  - miq_task_my_ui
  - miq_template_check_compliance
  - miq_template_compare
  - miq_template_drift
  - miq_template_edit
  - miq_template_perf
  - miq_template_refresh
  - miq_template_show
  - miq_template_show_list
  - miq_template_snapshot
  - miq_template_tag
  - miq_template_timeline
  - pxe
  - resource_pool_show
  - resource_pool_show_list
  - resource_pool_tag
  - rss
  - service_view
  - storage_delete
  - storage_scan
  - storage_show
  - storage_show_list
  - storage_perf
  - storage_tag
  - timeline
  - vm_check_compliance
  - vm_collect_running_processes
  - vm_compare
  - vm_cloud_explorer
  - vm_explorer
  - vm_infra_explorer
  - vm_html5_console
  - vm_vmrc_console
  - vm_drift
  - vm_edit
  - vm_perf
  - vm_refresh
  - vm_reset
  - vm_guest_restart
  - vm_show
  - vm_show_list
  - vm_guest_shutdown
  - vm_snapshot
  - vm_start
  - vm_stop
  - vm_suspend
  - vm_pause
  - vm_tag
  - vm_timeline
  - vm_chargeback
  - vm_terminate
  - sui_services_view
  - sui_vm_details_view
  - sui_vm_html5_console
  - sui_vm_vmrc_console
  - sui_vm_start
  - sui_vm_stop
  - sui_vm_suspend
  - sui_vm_tags
  - sui_notifications

- :name: EvmRole-security
  :read_only: true
  :miq_product_feature_identifiers:
  - about
  - all_vm_rules
  - chargeback
  - chargeback_reports
  - control
  - dashboard
  - ems_cluster_show
  - ems_cluster_show_list
  - ems_cluster_perf
  - ems_cluster_tag
  - ems_cluster_timeline
  - ems_infra_show
  - ems_infra_show_list
  - ems_infra_tag
  - ems_infra_timeline
  - ems_physical_infra_tag
  - ems_physical_infra_view
  - event_streams_view
  - physical_server_timeline
  - host_show
  - host_show_list
  - host_perf
  - host_tag
  - host_timeline
  - my_settings_view
  - my_settings_time_profiles
  - my_settings_visuals
  - miq_report_run
  - miq_report_saved_reports
  - miq_report_schedules
  - miq_report_view
  - miq_task_my_ui
  - miq_template_check_compliance
  - miq_template_compare
  - miq_template_drift
  - miq_template_perf
  - miq_template_policy_sim
  - miq_template_show
  - miq_template_show_list
  - miq_template_snapshot_add
  - miq_template_snapshot_delete
  - miq_template_snapshot_delete_all
  - miq_template_snapshot_revert
  - miq_template_tag
  - miq_template_timeline
  - policy_log
  - policy_simulation
  - physical_server_view
  - resource_pool_show
  - resource_pool_show_list
  - resource_pool_tag
  - rss
  - service_view
  - storage_show
  - storage_show_list
  - storage_perf
  - storage_tag
  - timeline
  - vm_check_compliance
  - vm_compare
  - vm_drift
  - vm_cloud_explorer
  - vm_explorer
  - vm_infra_explorer
  - vm_perf
  - vm_policy_sim
  - vm_show
  - vm_show_list
  - vm_snapshot_add
  - vm_snapshot_delete
  - vm_snapshot_delete_all
  - vm_snapshot_revert
  - vm_tag
  - vm_timeline
  - vm_chargeback
  - sui_services_view
  - sui_vm_details_view
  - sui_vm_snapshot_create
  - sui_vm_snapshot_delete
  - sui_vm_tags
  - sui_notifications

- :name: EvmRole-support
  :read_only: true
  :miq_product_feature_identifiers:
  - about
  - all_vm_rules
  - chargeback
  - chargeback_reports
  - control
  - dashboard
  - ems_cluster_show
  - ems_cluster_show_list
  - ems_cluster_perf
  - ems_cluster_tag
  - ems_cluster_timeline
  - ems_infra_show
  - ems_infra_show_list
  - ems_infra_tag
  - ems_infra_timeline
  - ems_physical_infra_console
  - ems_physical_infra_tag
  - ems_physical_infra_view
  - event_streams_view
  - host_show
  - host_show_list
  - host_perf
  - host_tag
  - host_timeline
  - miq_task_my_ui
  - my_settings_view
  - my_settings_time_profiles
  - my_settings_visuals
  - miq_report_run
  - miq_report_saved_reports
  - miq_report_schedules
  - miq_report_view
  - miq_template_check_compliance
  - miq_template_compare
  - miq_template_drift
  - miq_template_perf
  - miq_template_policy_sim
  - miq_template_show
  - miq_template_show_list
  - miq_template_snapshot
  - miq_template_tag
  - miq_template_timeline
  - physical_infra_topology_view
  - physical_rack_view
  - physical_chassis_view
  - physical_switch_view
  - physical_server_view
  - physical_storage_view
  - policy_log
  - policy_simulation
  - resource_pool_show
  - resource_pool_show_list
  - resource_pool_tag
  - rss
  - service_view
  - storage_show
  - storage_show_list
  - storage_perf
  - storage_tag
  - timeline
  - vm_check_compliance
  - vm_collect_running_processes
  - vm_cloud_explorer
  - vm_explorer
  - vm_infra_explorer
  - vm_html5_console
  - vm_vmrc_console
  - vm_compare
  - vm_drift
  - vm_perf
  - vm_policy_sim
  - vm_show
  - vm_show_list
  - vm_snapshot
  - vm_tag
  - vm_timeline
  - vm_chargeback
  - sui_services_view
  - sui_vm_details_view
  - sui_vm_html5_console
  - sui_vm_vmrc_console
  - sui_vm_tags
  - sui_notifications

- :name: EvmRole-user
  :read_only: true
  :miq_product_feature_identifiers:
  - about
  - all_vm_rules
  - chargeback
  - chargeback_reports
  - dashboard
  - ems_cluster_show
  - ems_cluster_show_list
  - ems_cluster_perf
  - ems_cluster_tag
  - ems_cluster_timeline
  - ems_infra_show
  - ems_infra_show_list
  - ems_infra_tag
  - ems_infra_timeline
  - ems_physical_infra_console
  - ems_physical_infra_show
  - ems_physical_infra_show_list
  - ems_physical_infra_tag
  - ems_physical_infra_timeline
  - event_streams_view
  - host_show
  - host_show_list
  - host_perf
  - host_tag
  - host_timeline
  - miq_task_my_ui
  - my_settings_view
  - my_settings_time_profiles
  - my_settings_visuals
  - miq_report_run
  - miq_report_saved_reports
  - miq_report_schedules
  - miq_report_view
  - miq_request_admin
  - miq_request_view
  - miq_template_check_compliance
  - miq_template_compare
  - miq_template_drift
  - miq_template_perf
  - miq_template_show
  - miq_template_show_list
  - miq_template_snapshot
  - miq_template_tag
  - miq_template_timeline
  - physical_infra_topology_view
  - physical_rack_view
  - physical_chassis_view
  - physical_switch_view
  - physical_server_view
  - physical_storage_view
  - resource_pool_show
  - resource_pool_show_list
  - resource_pool_tag
  - rss
  - service_view
  - storage_show
  - storage_show_list
  - storage_perf
  - storage_tag
  - timeline
  - vm_check_compliance
  - vm_cloud_explorer
  - vm_explorer
  - vm_infra_explorer
  - vm_html5_console
  - vm_vmrc_console
  - vm_compare
  - vm_drift
  - vm_perf
  - vm_show
  - vm_show_list
  - vm_snapshot
  - vm_tag
  - vm_timeline
  - vm_chargeback
  - sui_services_view
  - sui_vm_details_view
  - sui_vm_html5_console
  - sui_vm_vmrc_console
  - sui_vm_tags
  - sui_orders_view
  - sui_orders_operations
  - sui_notifications

- :name: EvmRole-user_global_region
  :read_only: true
  :miq_product_feature_identifiers:
  - about
  - chargeback
  - dashboard
  - ems_cluster_perf
  - ems_cluster_show
  - ems_cluster_show_list
  - ems_cluster_tag
  - ems_cluster_timeline
  - ems_infra_show
  - ems_infra_show_list
  - ems_infra_tag
  - ems_infra_timeline
  - ems_physical_infra_console
  - ems_physical_infra_show
  - ems_physical_infra_show_list
  - ems_physical_infra_tag
  - ems_physical_infra_timeline
  - event_streams_view
  - host_perf
  - host_show
  - host_show_list
  - host_tag
  - host_timeline
  - instance_guest_restart
  - instance_miq_request_new
  - instance_pause
  - instance_resize
  - instance_resume
  - instance_retire
  - instance_retire_now
  - instance_shelve
  - instance_shelve_offload
  - instance_start
  - instance_stop
  - instance_suspend
  - instance_terminate
  - instance_view
  - miq_report_run
  - miq_report_saved_reports
  - miq_report_schedules
  - miq_report_view
  - miq_request_admin
  - miq_request_view
  - miq_task_my_ui
  - my_settings_view
  - my_settings_time_profiles
  - my_settings_visuals
  - physical_chassis_view
  - physical_infra_topology_view
  - physical_rack_view
  - physical_server_view
  - physical_storage_view
  - physical_switch_view
  - resource_pool_show
  - resource_pool_show_list
  - resource_pool_tag
  - rss
  - service_view
  - storage_perf
  - storage_show
  - storage_show_list
  - storage_tag
  - sui_notifications
  - sui_orders_operations
  - sui_orders_view
  - sui_services_view
  - sui_vm_details_view
  - sui_vm_html5_console
  - sui_vm_vmrc_console
  - sui_vm_tags
  - timeline
  - vm_cloud_explorer
  - vm_explorer
  - vm_guest_restart
  - vm_guest_shutdown
  - vm_infra_explorer
  - vm_miq_request_new
  - vm_pause
  - vm_reconfigure
  - vm_reset
  - vm_retire
  - vm_retire_now
  - vm_start
  - vm_stop
  - vm_suspend
  - vm_view

- :name: EvmRole-user_limited_self_service
  :read_only: true
  :settings:
    :restrictions:
      :vms: :user
      :service_templates: :user
  :miq_product_feature_identifiers:
  - about
  - all_vm_rules
  - catalog_items_view
  - miq_request_admin
  - miq_request_view
  - miq_task_my_ui
  - my_settings_view
  - my_settings_visuals
  - service_edit
  - service_delete
  - service_reconfigure
  - service_tag
  - service_retire_now
  - service_view
  - svc_catalog_provision
  - vm_clone
  - vm_cloud_explorer
  - vm_guest_restart
  - vm_guest_shutdown
  - vm_infra_explorer
  - vm_miq_request_new
  - vm_publish
  - vm_reset
  - vm_retire_now
  - vm_show
  - vm_show_list
  - vm_snapshot_view
  - vm_start
  - vm_stop
  - vm_suspend
  - vm_pause
  - vm_tag
  - sui_core
  - sui_services
  - sui_vm
  - sui_orders
  - sui_svc_catalog_view
  - sui_svc_catalog_cart
  - sui_cart

- :name: EvmRole-physical_storages_user
  :read_only: true
  :miq_product_feature_identifiers:
  - about
  - all_vm_rules
  - catalog_items_view
  - catalogitem_edit
  - catalogitem_tag
  - cloud_tenant
  - cloud_volume_view
  - cloud_volume_control
  - cloud_volume_new
  - cloud_volume_edit
  - cloud_volume_backup_create
  - cloud_volume_backup_restore
  - cloud_volume_snapshot_create
  - cloud_volume_attach
  - cloud_volume_detach
  - cloud_volume_reload
  - cloud_volume_refresh
  - cloud_volume_type
  - chargeback
  - chargeback_reports
  - dashboard
  - ems_storage_recheck_auth_status
  - ems_block_storage_refresh
  - ems_block_storage_show
  - ems_block_storage_show_list
  - ems_block_storage_tag
  - ems_cluster_show
  - ems_cluster_show_list
  - ems_cluster_perf
  - ems_cluster_tag
  - ems_cluster_timeline
  - ems_infra_show
  - ems_infra_show_list
  - ems_infra_tag
  - ems_infra_timeline
  - ems_physical_infra_console
  - ems_physical_infra_show
  - ems_physical_infra_show_list
  - ems_physical_infra_tag
  - ems_physical_infra_timeline
  - ems_storage_discover
  - ems_storage_refresh
  - ems_storage_show
  - ems_storage_show_list
  - event_streams_view
  - host_show
  - host_show_list
  - host_perf
  - host_tag
  - host_timeline
  - host_initiator_view
  - host_initiator_control
  - host_initiator_new
  - host_initiator_group_view
  - host_initiator_group_control
  - host_initiator_group_new
  - host_initiator_group_show
  - host_initiator_group_show_list
  - host_initiator_group_edit
  - miq_task_my_ui
  - my_settings_view
  - my_settings_time_profiles
  - my_settings_visuals
  - miq_report_run
  - miq_report_saved_reports
  - miq_report_schedules
  - miq_report_view
  - miq_request_admin
  - miq_request_view
  - miq_template_check_compliance
  - miq_template_compare
  - miq_template_drift
  - miq_template_perf
  - miq_template_show
  - miq_template_show_list
  - miq_template_snapshot
  - miq_template_tag
  - miq_template_timeline
  - physical_infra_topology_view
  - physical_rack_view
  - physical_chassis_view
  - physical_switch_view
  - physical_server_view
  - physical_storage_show_list
  - physical_storage_show
  - physical_storage_refresh
  - physical_storage_tag
  - rbac_role_view
  - rbac_user_view
  - rbac_user_operate
  - rbac_group_view
  - rbac_group_operate
  - rbac_tenant_view
  - resource_pool_show
  - resource_pool_show_list
  - resource_pool_tag
  - rss
  - service_view
  - st_catalog_view
  - st_catalog_edit
  - storage_show
  - storage_show_list
  - storage_perf
  - storage_resource
  - storage_service_view
  - storage_service_control
  - storage_service_new
  - storage_service_show
  - storage_service_show_list
  - storage_tag
  - tasks_view
  - timeline
  - vm_check_compliance
  - vm_cloud_explorer
  - vm_explorer
  - vm_infra_explorer
  - vm_html5_console
  - vm_vmrc_console
  - volume_mapping
  - vm_compare
  - vm_drift
  - vm_perf
  - vm_show
  - vm_show_list
  - vm_snapshot
  - vm_tag
  - vm_timeline
  - vm_chargeback
  - sui_services_view
  - sui_vm_details_view
  - sui_vm_html5_console
  - sui_vm_vmrc_console
  - sui_vm_tags
  - sui_orders_view
  - sui_orders_operations
  - sui_notifications

- :name: EvmRole-user_self_service
  :read_only: true
  :settings:
    :restrictions:
      :vms: :user_or_group
      :service_templates: :user_or_group
  :miq_product_feature_identifiers:
  - about
  - all_vm_rules
  - ems_automation
  - automation_manager_configured_system
  - configuration_script
  - embedded_automation_manager
  - ems_physical_infra_console
  - catalog_items_view
  - ems_configuration
  - configuration_profile
  - configured_system
  - miq_task_my_ui
  - miq_template_clone
  - miq_template_drift
  - miq_template_edit
  - miq_template_perf
  - miq_template_refresh
  - miq_template_show
  - miq_template_show_list
  - miq_template_snapshot
  - miq_template_tag
  - miq_template_timeline
  - my_settings_view
  - my_settings_visuals
  - miq_request_admin
  - miq_request_view
  - service_edit
  - service_delete
  - service_reconfigure
  - service_tag
  - service_retire_now
  - service_view
  - svc_catalog_provision
  - vm_clone
  - vm_cloud_explorer
  - vm_drift
  - vm_edit
  - vm_guest_restart
  - vm_guest_shutdown
  - vm_infra_explorer
  - vm_miq_request_new
  - vm_perf
  - vm_publish
  - vm_refresh
  - vm_reset
  - vm_retire_now
  - vm_show
  - vm_show_list
  - vm_snapshot
  - vm_start
  - vm_stop
  - vm_suspend
  - vm_pause
  - vm_tag
  - vm_timeline
  - vm_chargeback
  - vm_vmrc_console
  - vm_html5_console
  - sui

- :name: EvmRole-vm_user
  :read_only: true
  :miq_product_feature_identifiers:
  - about
  - all_vm_rules
  - ems_automation
  - automation_manager_configured_system
  - configuration_script
  - ems_configuration
  - configuration_profile
  - configured_system
  - embedded_automation_manager
  - miq_task_my_ui
  - miq_request_admin
  - miq_request_view
  - miq_template_check_compliance
  - miq_template_clone
  - miq_template_drift
  - miq_template_edit
  - miq_template_perf
  - miq_template_show
  - miq_template_show_list
  - miq_template_snapshot
  - miq_template_tag
  - miq_template_timeline
  - my_settings_view
  - my_settings_visuals
  - vm_check_compliance
  - vm_clone
  - vm_cloud_explorer
  - vm_collect_running_processes
  - vm_compare
  - vm_drift
  - vm_explorer
  - vm_guest_restart
  - vm_guest_shutdown
  - vm_infra_explorer
  - vm_miq_request_new
  - vm_perf
  - vm_policy_sim
  - vm_publish
  - vm_refresh
  - vm_reset
  - vm_retire_now
  - vm_show
  - vm_show_list
  - vm_snapshot
  - vm_start
  - vm_stop
  - vm_suspend
  - vm_pause
  - vm_tag
  - vm_timeline
  - vm_chargeback
  - vm_vmrc_console
  - vm_html5_console
  - sui_vm_details_view
  - sui_vm_html5_console
  - sui_vm_vmrc_console
  - sui_vm_retire
  - sui_vm_start
  - sui_vm_stop
  - sui_vm_suspend
  - sui_vm_tags
  - sui_orders_view
  - sui_orders_operations
  - sui_notifications

- :name: EvmRole-tenant_administrator
  :read_only: true
  :miq_product_feature_identifiers:
  - about
  - ems_automation
  - automation_manager_configured_system
  - configuration_script
  - embedded_automation_manager
  - availability_zone
  - host_aggregate
  - all_vm_rules
  - cloud_network
  - cloud_subnet
  - flavor
  - floating_ip
  - chargeback
  - catalog
  - cloud_tenant
  - ems_configuration
  - configuration_profile
  - configured_system
  - control
  - dashboard
  - storage
  - ems_cloud
  - ems_network
  - ems_cluster
  - ems_infra
  - ems_physical_infra
  - host
  - load_balancer
  - miq_ae_class_explorer
  - miq_ae_customization_explorer
  - miq_ae_class_import_export
  - miq_ae_class_log
  - miq_ae_class_simulation
  - miq_task_all_ui
  - miq_task_my_ui
  - my_settings
  - network_port
  - network_router
  - policy_simulation
  - policy_log
  - miq_report
  - miq_request
  - miq_template
  - orchestration_stack
  - policy_import_export
  - pxe
  - rbac_group
  - rbac_role_view
  - rbac_tenant
  - rbac_user
  - resource_pool
  - rss
  - security_group
  - service
  - timeline
  - utilization
  - vm_explorer
  - vm
  - vm_cloud_explorer
  - vm_infra_explorer
  - sui_services
  - sui_notifications

- :name: EvmRole-tenant_quota_administrator
  :read_only: true
  :miq_product_feature_identifiers:
  - about
  - ems_automation
  - automation_manager_configured_system
  - configuration_script
  - embedded_automation_manager
  - availability_zone
  - host_aggregate
  - all_vm_rules
  - flavor
  - chargeback
  - catalog
  - cloud_tenant
  - ems_configuration
  - configuration_profile
  - configured_system
  - control
  - dashboard
  - storage
  - ems_cloud
  - ems_cluster
  - ems_infra
  - ems_physical_infra
  - host
  - miq_ae_class_explorer
  - miq_ae_customization_explorer
  - miq_ae_class_import_export
  - miq_ae_class_log
  - miq_ae_class_simulation
  - miq_task_all_ui
  - miq_task_my_ui
  - my_settings
  - policy_simulation
  - policy_log
  - miq_report
  - miq_request
  - miq_template
  - orchestration_stack
  - policy_import_export
  - pxe
  - rbac_tenant_view
  - rbac_tenant_manage_quotas
  - resource_pool
  - rss
  - security_group
  - service
  - timeline
  - utilization
  - vm_explorer
  - vm
  - vm_cloud_explorer
  - vm_infra_explorer
  - sui_services
  - sui_notifications

- :name: EvmRole-consumption_administrator
  :read_only: true
  :miq_product_feature_identifiers:
  - dashboard
  - chargeback
  - miq_report
  - my_settings_view

- :name: EvmRole-container_administrator
  :read_only: true
  :miq_product_feature_identifiers:
  - vms_filter_accord
  - instances_filter_accord
  - datacenter_controller
  - storage
  - storage_pod
  - dashboard
  - miq_report
  - consumption
  - chargeback
  - pictures
  - control
  - generic_object
  - generic_object_definition
  - my_settings
  - tasks
  - about
  - ems_container
  - container_group
  - container_node
  - container_replicator
  - container_image
  - container_image_registry
  - persistent_volume
  - container_build
  - container_template
  - container_service
  - container_route
  - container_project
  - container
  - container_topology
  - container_dashboard
  - ems_infra_dashboard
  - instance_view
  - vm_view
  - miq_cloud_networks
  - monitor_alerts
  - alert_status
  - alert_action
  - ems_infra
  - rbac_user
  - ops_settings

- :name: EvmRole-container_operator
  :read_only: true
  :miq_product_feature_identifiers:
  - vms_filter_accord
  - instances_filter_accord
  - dashboard_view
  - miq_report_saved_reports_view
  - miq_report_view
  - miq_report_control
  - chargeback_reports
  - my_settings
  - tasks
  - ems_container_view
  - ems_container_check_compliance
  - container_group_view
  - container_group_check_compliance
  - container_node_view
  - container_node_check_compliance
  - container_replicator_check_compliance
  - container_image_view
  - container_image_scan
  - container_image_check_compliance
  - container_image_registry_view
  - persistent_volume_view
  - container_build_view
  - container_template_view
  - container_service_view
  - container_route_view
  - container_project_view
  - container_filter_accord
  - container_view
  - container_control
  - container_topology
  - container_dashboard
  - instance_view
  - vm_view
  - monitor_alerts
  - alert_status
  - alert_action
  - ems_infra
  - rbac_user
  - ops_settings

- :name: EvmRole-reader
  :read_only: true
  :miq_product_feature_identifiers:
  - auth_key_pair_cloud_view
  - automation_manager_configuration_script_view
  - automation_manager_configured_system_view
  - automation_manager_providers_view
  - availability_zone_view
  - catalog_items_view
  - cloud_network_view
  - cloudobject_store_container_view
  - cloud_object_store_object_view
  - cloud_subnet_view
  - cloud_tenant_view
  - cloud_topology
  - cloud_volume_backup_view
  - cloud_volume_snapshot_view
  - cloud_volume_view
  - configuration_job_view
  - configuration_script_view
  - configured_systems_filter_accord_view
  - container_build_view
  - container_dashboard
  - container_filter_accord
  - container_group_view
  - container_image_registry_view
  - container_image_view
  - container_node_view
  - container_project_view
  - container_replicator_view
  - container_route_view
  - container_service_view
  - container_template_view
  - container_topology
  - container_view
  - customization_template_view
  - dashboard_view
  - embedded_automation_manager_credentials_view
  - embedded_configuration_script_payload_view
  - embedded_configuration_script_source_view
  - ems_block_storage_view
  - ems_cloud_view
  - ems_cluster_view
  - ems_container_view
  - ems_infra_view
  - ems_physical_infra_view
  - ems_network_view
  - ems_object_storage_view
  - event_streams_view
  - flavor_view
  - floating_ip_view
  - host_aggregate_view
  - host_view
  - image_view
  - infra_networking_view
  - infra_topology
  - instance_view
  - iso_datastore_view
  - load_balancer_view
  - miq_ae_class_log
  - miq_ae_domain_view
  - miq_report_saved_reports_view
  - miq_report_schedule_view
  - miq_report_view
  - miq_request_view
  - miq_template_snapshot_view
  - miq_template_view
  - my_settings
  - network_port_view
  - network_router_view
  - network_topology
  - orchestration_stack_view
  - orchestration_templates_view
  - persistent_volume_view
  - physical_infra_topology_view
  - physical_rack_view
  - physical_chassis_view
  - physical_switch_view
  - physical_server_view
  - physical_storage_view
  - policy_log
  - ems_configuration_view
  - pxe_image_type_view
  - pxe_server_view
  - rbac_group_view
  - rbac_role_view
  - rbac_tenant_view
  - rbac_user_view
  - resource_pool_view
  - rss
  - security_group_view
  - service_view
  - st_catalog_view
  - storage_view
  - tasks
  - timeline
  - utilization
  - vm_cloud_explorer
  - vm_explorer
  - vm_infra_explorer
  - vm_snapshot_view
  - vm_view
  - sui_services_view
  - sui_orders_view
  - sui_notifications

- :name: EvmRole-physical_infrastructure
  :read_only: true
  :miq_product_feature_identifiers:
  - everything